Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CED9/0C253A4A22E611EA950A1886C4F9AE02/a4fGlPeh3cQ3Z_WJ6yd650_tO3s.mft
File:                     a4fGlPeh3cQ3Z_WJ6yd650_tO3s.mft (raw, json)
Hash identifier:          5zjG+lrhyQ18FBFpHBz2ZuP0aF6f1BLlpJV6EHMGjyg=
Subject key identifier:   95:D2:2C:EB:10:EA:19:7A:42:79:9D:9D:AC:99:29:E7:C7:2E:57:05
Authority key identifier: 6B:87:C6:94:F7:A1:DD:C4:37:67:F5:89:EB:27:7A:E7:4F:ED:3B:7B
Certificate issuer:       /CN=A911CED9/serialNumber=6B87C694F7A1DDC43767F589EB277AE74FED3B7B
Certificate serial:       0A6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4fGlPeh3cQ3Z_WJ6yd650_tO3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CED9/0C253A4A22E611EA950A1886C4F9AE02/a4fGlPeh3cQ3Z_WJ6yd650_tO3s.mft
Manifest number:          0A56
Signing time:             Mon 31 Jul 2023 19:53:51 +0000
Manifest this update:     Mon 31 Jul 2023 19:53:51 +0000
Manifest next update:     Mon 07 Aug 2023 19:53:51 +0000
Files and hashes:         1: a4fGlPeh3cQ3Z_WJ6yd650_tO3s.crl (hash: IojglxL9c+LYEtVNlF8LRGgpxR3bD/8l5A2LNM/PL8A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2666 (0xa6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CED9/serialNumber=6B87C694F7A1DDC43767F589EB277AE74FED3B7B
        Validity
            Not Before: Jul 31 19:53:51 2023 GMT
            Not After : Aug  7 19:53:51 2023 GMT
        Subject: CN=64c8114f-5438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:c8:47:a6:80:e5:87:23:f3:67:83:5b:9c:
                    50:96:07:cd:db:5f:db:52:e8:95:26:87:c4:06:c8:
                    16:bb:56:70:90:85:91:8d:ad:68:f4:15:82:04:85:
                    4f:28:b2:23:d3:6a:cf:f1:ef:4e:a9:ea:af:7e:58:
                    71:ba:54:68:de:56:a9:87:cf:16:f8:cb:54:a7:e1:
                    e0:74:57:ec:59:1a:7f:ae:d6:1c:f9:da:d4:26:82:
                    44:3d:c8:80:e2:b3:58:8d:1b:5f:2c:78:98:d3:61:
                    64:81:f7:d8:0e:4a:fd:dc:3a:5e:08:cd:71:77:36:
                    74:6f:0a:a2:33:6d:a6:2c:28:1b:08:fa:13:3c:b3:
                    e9:69:68:f0:94:97:8e:59:ca:73:74:52:2d:7f:13:
                    52:3e:2a:7e:27:7f:45:f4:18:02:69:8f:dd:d8:73:
                    17:0b:cc:8e:2a:4a:03:8c:93:e5:3c:0c:78:cb:c1:
                    06:30:e6:dd:ad:f2:28:73:1e:bd:9f:25:87:bd:ad:
                    7c:bb:93:cd:b9:e4:e5:7a:2b:f9:b1:4d:ed:7c:7c:
                    e3:ed:17:26:db:b4:ff:18:91:4f:d5:a3:5a:bf:51:
                    86:17:d6:76:83:bf:d1:b5:c8:13:e4:0d:04:8e:e4:
                    c0:5b:93:a8:66:2d:35:5d:57:bc:75:fc:72:ab:a6:
                    f3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D2:2C:EB:10:EA:19:7A:42:79:9D:9D:AC:99:29:E7:C7:2E:57:05
            X509v3 Authority Key Identifier:
                keyid:6B:87:C6:94:F7:A1:DD:C4:37:67:F5:89:EB:27:7A:E7:4F:ED:3B:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CED9/0C253A4A22E611EA950A1886C4F9AE02/a4fGlPeh3cQ3Z_WJ6yd650_tO3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4fGlPeh3cQ3Z_WJ6yd650_tO3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CED9/0C253A4A22E611EA950A1886C4F9AE02/a4fGlPeh3cQ3Z_WJ6yd650_tO3s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:4a:e8:d1:4a:fb:6d:c0:84:43:ff:67:7a:01:d1:7a:70:
         66:42:6d:a4:8e:09:c9:cf:cd:35:04:45:bd:97:a4:43:13:5a:
         5c:9a:bf:9f:c0:35:dc:6c:de:b1:1d:00:b8:f4:72:20:55:1e:
         00:c3:da:fd:93:f4:6c:bd:16:1f:4a:a0:a9:21:26:96:0e:ea:
         0a:3f:d1:3d:c5:fb:0a:2b:10:1c:01:b1:47:17:30:6b:39:83:
         aa:5a:d8:16:c1:32:36:02:f9:8b:2c:28:f8:85:58:bd:5e:b4:
         bd:88:0a:3e:05:9a:40:36:0f:e1:08:c7:57:ae:f7:6a:1c:e7:
         10:3e:55:2f:9a:80:9e:6c:07:98:14:82:99:e0:40:95:71:d3:
         b6:1f:14:11:f2:35:89:4d:a8:fb:0f:a8:3e:01:fc:c8:a5:ca:
         0a:7b:04:b4:07:39:90:df:78:5f:85:a5:82:5e:b6:91:35:33:
         7b:f4:42:fc:59:57:6d:ee:c0:11:a7:a5:f2:df:8a:6d:b1:1f:
         fb:e2:1b:46:e5:bb:81:fe:0b:78:3f:25:2b:2b:3b:f8:ec:de:
         ac:91:9c:1a:a1:ba:21:60:b4:cf:15:1a:76:e7:ef:89:12:b9:
         a3:3d:8b:8d:cf:03:ee:5d:7b:b8:31:42:23:ba:b3:24:48:10:
         18:38:aa:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNFRDkxMTAvBgNVBAUTKDZCODdDNjk0RjdBMUREQzQzNzY3RjU4OUVCMjc3QUU3
NEZFRDNCN0IwHhcNMjMwNzMxMTk1MzUxWhcNMjMwODA3MTk1MzUxWjAYMRYwFAYD
VQQDEw02NGM4MTE0Zi01NDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx5fIR6aA5Ycj82eDW5xQlgfN21/bUuiVJofEBsgWu1ZwkIWRja1o9BWCBIVP
KLIj02rP8e9OqeqvflhxulRo3laph88W+MtUp+HgdFfsWRp/rtYc+drUJoJEPciA
4rNYjRtfLHiY02FkgffYDkr93DpeCM1xdzZ0bwqiM22mLCgbCPoTPLPpaWjwlJeO
WcpzdFItfxNSPip+J39F9BgCaY/d2HMXC8yOKkoDjJPlPAx4y8EGMObdrfIocx69
nyWHva18u5PNueTleiv5sU3tfHzj7Rcm27T/GJFP1aNav1GGF9Z2g7/RtcgT5A0E
juTAW5OoZi01XVe8dfxyq6bziwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXSLOsQ
6hl6QnmdnayZKefHLlcFMB8GA1UdIwQYMBaAFGuHxpT3od3EN2f1iesneudP7Tt7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0VEOS8wQzI1M0E0QTIy
RTYxMUVBOTUwQTE4ODZDNEY5QUUwMi9hNGZHbFBlaDNjUTNaX1dKNnlkNjUwX3RP
M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E0ZkdsUGVoM2NRM1pfV0o2eWQ2NTBfdE8zcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Q0VEOS8wQzI1M0E0QTIyRTYxMUVBOTUwQTE4ODZDNEY5QUUwMi9hNGZHbFBlaDNj
UTNaX1dKNnlkNjUwX3RPM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCzkro0Ur7bcCEQ/9negHRenBmQm2kjgnJz801BEW9l6RDE1pcmr+f
wDXcbN6xHQC49HIgVR4Aw9r9k/RsvRYfSqCpISaWDuoKP9E9xfsKKxAcAbFHFzBr
OYOqWtgWwTI2AvmLLCj4hVi9XrS9iAo+BZpANg/hCMdXrvdqHOcQPlUvmoCebAeY
FIKZ4ECVcdO2HxQR8jWJTaj7D6g+AfzIpcoKewS0BzmQ33hfhaWCXraRNTN79EL8
WVdt7sARp6Xy34ptsR/74htG5buB/gt4PyUrKzv47N6skZwaobohYLTPFRp25++J
ErmjPYuNzwPuXXu4MUIjurMkSBAYOKpp
-----END CERTIFICATE-----